Software Engineer (Application Security Platform)

Overview

PepsiCo’s Global Application Security Program is responsible for integrating security at scale in all development workflows to identify and manage application security risks. Our mission is to make security risks visible to and actionable by the business to ensure security findings are addressed promptly and effectively.

 

This role is responsible for contributing to the development of our core automated application security posture management platform and fostering a culture of proactive security across the organization

Responsibilities

• Develop, implement, test, and maintain components of our platform, including APIs, container services, queues, databases, and UIs.
• Stand up, integrate, implement, deploy, configure, and test cloud services to support platform scalability, performance, and reliability.
• Develop, implement, test, and maintain IaC components in the code to automate and optimize deployments.
• Implement scalable integrations with third-party application security scanning tools, source code management systems, and work item/issue trackers.
• Ensure code quality through robust functional testing, unit testing, and code reviews.
• Take responsibility for delivering specific features or modules within project timelines.
• Track and manage work in agile workflows, including creating and updating stories, story pointing, sprint planning, backlog grooming, and daily stand-ups to ensure timely and efficient delivery of tasks.
• Establish and monitor key performance indicators (KPIs) to constantly measure effectiveness and make necessary adjustments for continuous improvement.
• Foster a collaborative environment and promote knowledge sharing to help the team grow.
• Continuously research and raise novel concepts to improve the application security posture of the business. Stay updated with the latest security trends, tools, and practices.
• Support 24/7 hour on-call, including weekends/holidays, on a rotating basis.
• Develop technical documentation (i.e. system design, architecture diagrams, data flows, functional specifications).
• Develop program metrics, continuously measure progress/impact, and drive improvements.
• Collaborate with the leadership and cross-functional teams including DevOps, development teams, security operations, data and analytics, enterprise architecture, platform teams, and sector functions.
• Execute projects, objectives, and deliverables in alignment with the team's vision, mission, and goals.

Compensation and Benefits:

• The expected compensation range for this position is between $69,900 - $117,000.
• Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.
• Bonus based on performance and eligibility target payout is 5% of annual salary paid out annually.Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.
• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

Experience:

Bachelor´s degree in computer science, engineering, or related field. 1-2 years of relevant experience. 

 

Technical Skills:

• Proficient in Python and/or Go.
• Proficient in SQL and at least one relational database framework (MSSQL, PostgreSQL, etc.).
• Understanding of design patterns & principles.
• Hands-on experience developing full-stack applications and rapidly prototyping solutions.
• Hands-on experience with modern CI/CD tools and practices (GitHub Enterprise, Azure DevOps, Jenkins, etc.)
• Experience with public cloud services (AWS Preferred).
• Experience with IaC development (Terraform preferred).
• Familiarity with developing and monitoring metrics and KPIs.
• Experience with generative AI technologies is a plus.

Non-technical Skills:

• Strong communication skills, both verbal and written.
• High level of integrity and ethical standards.
• Excellent problem-solving, analytical, and critical thinking skills.
• Demonstrated ability to make decisions and take calculated risks autonomously.
• A proactive and positive team player who is impact-focused, driven, curious, analytical, and a self-starter.
• Ability to establish trust relationships and in